Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feat: add Team Finance attack #53

Open
patosabogal opened this issue Jan 31, 2023 · 2 comments
Open

Feat: add Team Finance attack #53

patosabogal opened this issue Jan 31, 2023 · 2 comments
Labels
to-reproduce Attacks pending to be reproduced

Comments

@patosabogal
Copy link

On October 27, 2022 an attacker $15.8 M in tokens from Team Finance.

Attack Overview

  • $11.5M CAW
  • $1.7M TSUKA
  • $0.7M KNDX
  • $1.9M FEG

Total Lost: $15.8M USD

Key Info Sources
Writeup: https://rekt.news/teamfinance-rekt/

Principle: Business Logic - Faulty migrate function
@joaquinlpereyra joaquinlpereyra added the to-reproduce Attacks pending to be reproduced label Feb 28, 2023
@nine-december
Copy link
Collaborator

Working on this attack

nine-december referenced this issue Feb 28, 2023
@nine-december
feat: added inflation tx logic
db931e4
nine-december referenced this issue Mar 1, 2023
@nine-december
feat: full attack reproduction completed
cf359fe
nine-december referenced this issue Mar 1, 2023
@nine-december
feat: [writeup] finished attack writeup
5974ffb
@nine-december
Copy link
Collaborator

The attack is ready. We could add some cool D2 graphs and this should be ready to for a pre-merge revision.

@nine-december nine-december mentioned this issue Mar 1, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
to-reproduce Attacks pending to be reproduced
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@joaquinlpereyra @patosabogal @nine-december